Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153113.roa
File: AS153113.roa (raw, json)
Hash identifier: JhTDTypaHuRsCY2P/y1svE2kHO3CrIvehQhsRVwev1A=
Subject key identifier: 25:12:38:F8:37:CB:95:4D:20:74:BF:CE:B4:EC:07:58:B0:93:19:02
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 1490E91715BC1286D5B911A86BEB340889A2246A
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153113.roa
Signing time: Wed 05 Mar 2025 04:39:12 +0000
ROA not before: Wed 05 Mar 2025 04:34:12 +0000
ROA not after: Wed 04 Mar 2026 04:39:12 +0000
asID: 153113
IP address blocks: 160.22.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:90:e9:17:15:bc:12:86:d5:b9:11:a8:6b:eb:34:08:89:a2:24:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 5 04:34:12 2025 GMT
Not After : Mar 4 04:39:12 2026 GMT
Subject: CN=251238F837CB954D2074BFCEB4EC0758B0931902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:3a:4e:11:97:f9:90:23:57:33:83:89:e6:
6a:4d:4b:a1:a2:2f:50:40:7d:22:59:79:17:46:da:
7e:1d:80:3c:ec:0a:19:57:61:fa:88:81:59:ff:d4:
3f:91:3a:dc:bb:b7:65:66:c8:78:cb:35:4f:83:c2:
33:db:b2:e5:41:07:07:de:ba:9e:84:a9:fa:d1:23:
11:3b:6f:47:ab:ce:d6:60:85:77:cf:63:3c:4e:35:
94:48:bf:fd:cd:56:78:95:66:a5:a2:9c:eb:e2:27:
b2:5c:5c:08:a7:d7:1a:c7:19:42:f3:f4:34:20:49:
2e:9d:5e:59:0a:03:21:3d:73:65:9f:94:99:ba:ca:
43:7c:2e:03:1d:d6:9a:9c:86:78:93:6a:6d:fa:7a:
8f:5b:be:2d:c2:d8:17:e9:68:63:48:57:e1:00:a2:
e7:4e:59:a5:8d:b8:a9:d1:e1:0e:5f:a4:80:b4:54:
41:22:a4:84:e7:e9:a1:43:06:62:5a:24:f2:a6:f3:
e5:4c:8d:fc:22:b1:07:69:14:b2:d9:69:17:cf:f2:
fa:16:c9:af:92:10:45:99:b5:e1:90:2d:c2:b3:13:
77:4f:07:1d:d8:6b:70:ea:5d:ab:d8:65:f4:26:8a:
da:9c:18:13:cb:79:37:9d:3e:7d:e8:da:ca:e5:63:
c8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:12:38:F8:37:CB:95:4D:20:74:BF:CE:B4:EC:07:58:B0:93:19:02
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS153113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.9.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f7:79:b4:41:19:08:54:28:ea:d1:27:a9:2e:a1:62:c7:75:
15:92:e1:e0:0f:59:82:cf:38:ca:27:c2:7e:83:4b:49:01:61:
2e:2a:82:21:95:ea:9d:ad:d2:06:76:45:bf:d4:9b:1d:20:b2:
cc:2b:ba:f3:17:05:55:36:4b:2a:e8:bc:a8:65:3e:14:95:cd:
55:83:e5:b2:16:19:97:54:dd:e5:13:9b:14:43:3a:ff:a3:11:
c1:4f:3f:47:28:d7:ea:fa:3a:87:8c:fd:dd:3d:16:06:56:ed:
56:26:b6:cf:d3:fe:91:bd:b5:1e:ed:a6:39:f6:0d:ab:56:3a:
a0:84:a9:5f:19:c2:10:ef:cd:fa:e9:b5:e5:02:17:36:70:fd:
52:bf:c1:7a:47:66:99:00:ad:0b:ef:2e:1d:a3:19:6f:86:8b:
5b:a4:91:48:fa:98:34:6f:8d:64:1b:86:a3:9c:37:74:93:a5:
70:48:03:fa:a2:a2:dc:cb:ce:90:17:5b:7e:c5:2c:55:37:70:
a5:71:23:a4:39:db:47:b1:45:9c:f2:12:d5:98:2f:8e:a3:ab:
ff:db:d9:d5:31:60:2e:67:d3:eb:f5:77:9f:ef:e1:98:9f:85:
19:1a:b6:31:56:37:f2:82:de:9e:d1:52:54:62:ae:87:ab:30:
5b:25:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:34:35 2025 by rpki-client